On Fri, Aug 15, 2014 at 5:07 PM, Ivan Lezhnjov IV < [email protected]> wrote:
> Suppose it is true. What fails to perform the DNS resolution then? > rsyslog? How does it do it? > > rsyslog calls the OS API which then does .. what it does ;) Rainer > Unfortunately, I do not know what the "rawmessage" is, nor how to look it > up. I'd be happy to provide more information if somebody explained how to > gather it. > > Ivan > > On Aug 15, 2014, at 5:49 PM, Rainer Gerhards <[email protected]> > wrote: > > > Could this be a problem with DNS resolution during that timeframe? How do > > the messages themself look like (rawmesage, pls)? > > > > > > On Fri, Aug 15, 2014 at 2:16 PM, Ivan Lezhnjov IV < > > [email protected]> wrote: > > > >> A small correction. > >> > >> The fourth v5 client was affected too: > >> > >> |-- r > >> | `-- 2014 > >> | `-- 08 > >> | `-- 14 > >> | `-- syslog.log > >> > >> It happened at 18:50 like with the rest of hosts, but instead of an IP > >> address or proper host name %HOSTNAME% was expanded to just "r" for this > >> client. > >> > >> Ivan > >> _______________________________________________ > >> rsyslog mailing list > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> http://www.rsyslog.com/professional-services/ > >> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > >> DON'T LIKE THAT. > >> > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
